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Amendments to the Claims : 

This listing of claims will replace all prior versions, and listings, of claims in the 
application. 
Listing of Claims : 

1 . (previously presented) The system of claim 23, where the second entity includes: 
a service activation component offering the extensible set of services. 

2. (currently amended) The system of claim 1 , wherein where the service activation 
component is configured to configure a router to deliver the service. 

3-7. (canceled) 

8. (currently amended) The system of claim 23, wherein where the first entity 
corresponds to a business partner system and the second entity corresponds to a service 
activation component, the service activation component provides the service to a customer 
associated with the business partner system, the business partner system generates the message 
requesting service for the customer; and 

wherein where the first interface module is further configured to: 

authenticate the business partner system based, at least in part, on information 

included in the message. 
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9. (currently amended) The system of claim 23, wherein where the first entity 
includes a plurality of service activation components; and 

wherein where the system further comprises: 

a second entity locator configured to obtain information associated with the service 
activation components; and 

wherein where the second interface module is further configured to: 

contact the second entity locator to identify one of the service activation 
components from which to request performance of the service. 

10. (currently amended) The system of claim 9, wherein where the message includes 
a subscriber identifier that identifies a subscriber on whose behalf the service is being requested; 
and 

wherein where the second entity locator is configured to map the subscriber identifier to 
the identified one of the service activation components. 

1 1 . (previously presented) The system of claim 23, further comprising: 

an extension manager configured to facilitate at least one of modification of services in 
the extensible set of services or addition of new services to the extensible set of services offered 
by the second entity. 

12. (currently amended) The system of claim 23, wherein where the extensible set of 
services includes network services associated with communication on the Internet. 
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13-15. (canceled) 

16. (previously presented) The method of claim 3 1 , further comprising: 
rejecting the message if the first result indicates that the first entity is not permitted to 

request performance of the network service, the second result indicates that the first entity is not 
permitted to provide the argument, or the third result indicates that the argument is not 
permissible for the network service. 

17. (canceled) 

18. (previously presented) The method of claim 3 1 , further comprising: 
configuring a router to deliver the network service to a subscriber. 

19. (canceled) 

20. (previously presented) The method of claim 3 1 , further comprising: 
authenticating the first entity based, at least in part, on information included in the 

message. 
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2 1 . (currently amended) The method of claim 3 1 , wherein where the message 
includes a subscriber identifier that identifies a subscriber on whose behalf the requested service 
is being requested; and 

wherein where the method further comprises identifying the second entity from a 
plurality of second entities based, at least in part, on the subscriber identifier included in the 
message. 

22. (currently amended) The method of claim 3 1 , wherein where the extensible set of 
network services includes network services associated with communication on the Internet. 

23. (currently amended) A system, comprising: 

a service gateway in communication with a first entity and a second entity, the service 
gateway comprising: 

a first interface module to receive, from the first entity, a message requesting 
performance of a service in an extensible set of services offered by the second entity, the 
message including a service name that corresponds to the service and an argument that 
includes data useful in performing used to perform the service; 
an access control module to: 

make a first determination of whether the first entity is permitted to 
request performance of the service corresponding to the service name, 

make a second determination of whether the argument is permitted to be 
provided by the first entity, and 
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make a third determination of whether the argument is permitted to be 
requested for the service corresponding to the service name; and 
a second interface module to selectively request performance of the service by the 

second entity based, at least in part, on results of the first, second, and third 

determinations of the access control module. 

24. (currently amended) The system of claim 23, wherein where the access control 
module is further configured to reject the message if the message first determination determines 
that the first entity is not permitted to request performance of the service, the second 
determination determines that the argument is not permitted to be provided by the first entity, or 
the third determination determines that the argument is not permitted to be requested for the 
service. 

25. (canceled) 

26. (currently amended) A wholesaler system that provides services to subscribers 
associated with a plurality of retailer systems, the wholesaler system comprising: 

a service activation component configured to provide the services to the subscribers; and 
a service gateway configured to act as a single point of contact between the retailer 
systems and the service activation component, the service gateway providing controlled access, 
by the retailer systems, to the services provided by the service activation component, the service 
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gateway permitting each of the retailer systems access to a subset of the services provided by the 
service activation component via the controlled access, 
the service gateway comprising: 

a first interface module to receive, from one of the retailer systems, a message 
requesting performance of one of the services by the service activation component, the 
message including at least one argument that includes data useful for performing used to 
perform the one service, 

an access control module to: 

make a first determination of whether the one retailer system is permitted 
to request performance of the one service, 

make a second determination of whether the at least one argument is 
permissible for the one retailer system, and 

make a third determination of whether the at least one argument is valid 
for the one service, and 

a second interface module to selectively interact with the service activation 
component based, at least in part, on the first, second, and third determinations of the 
access control module. 



27. (currently amended) The wholesaler system of claim 26, wherein where the 
services provided by the service activation component include network services. 
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28. (currently amended) The wholesaler system of claim 26, wherein where the 
services provided by the service activation component include an extensible set of services. 

29. (currently amended) The wholesaler system of claim 26, wherein where the 
service gateway and the service activation component in combination provide a common 
interface via which the retailer systems request one or more of the services provided by the 
service activation component, the combination exposing subsets of the common interface to each 
of the retailer systems by controlling access to the services by the retailer systems. 

30. (canceled) 

3 1 . (currently amended) A method performed in a n e twork that includ e s by a service 
gateway in communication with a first entity and a second entity, the method comprising: 

receiving, from the first entity, a message requesting performance of a network service of 
an extensible set of network services offered by the second entity, the message including a 
service name that corresponds to the network service and an argument that includes data useful 
in performing used to perform the network service; 

generating a first result based, at least in part, on a determination of whether the first 
entity is permitted to request performance of the network service corresponding to the service 
name; 

generating a second result based, at least in part, on a determination of whether the first 
entity is permitted to provide the argument; 
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generating a third result based, at least in part, on a determination of whether the 
argument is permissible for the network service corresponding to the service name; and 

selectively requesting performance of the network service by the second entity based, at 
least in part, on the first, second, and third results. 

32. (canceled) 

33. (previously presented) The system of claim 23, where the second interface 
module is configured to request performance of the service when the first determination 
determines that the first entity is permitted to request performance of the service, the second 
determination determines that the argument is permitted to be provided by the first entity, and the 
third determination determines that the argument is permitted to be requested for the service. 

34. (previously presented) The method of claim 3 1 , where selectively requesting 
performance of the network service includes: 

requesting performance of the network service when the first result indicates that the first 
entity is permitted to request performance of the network service, the second result indicates that 
the first entity is permitted to provide the argument, and the third result indicates that the 
argument is permissible for the network service. 

35. (currently amended) A system device , comprising: 
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means for receiving, from a requestor, a message requesting performance of one of a 
plurality of network services offered by a server, the message including an argument that 
includes data useful in performing used to perform the one network service; 

means for performing a first determination of whether the requestor is permitted to 
request performance of the one network service; 

means for performing a second determination of whether the requestor is permitted to 
provide the argument; 

means for performing a third determination of whether the argument is permissible for 
the one network service; and 

means for requesting performance of the one network service by the server based, at least 
in part, on the first, second, and third determinations. 
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